Vulnerability Reportanchore/grype:v0.114.0-debug

anchore/grype:v0.114.0-debuganchore/grype:debug

digestsha256:c7a0a7fdb173e2a3cd71946be01dd3247782299b3c01e4cbff9aa426e073ba5f

Executive Summary

Last scanned: Jul 24, 2026

Threat ScoreSAFE• Zero exposed vulnerabilities (exposed_total: 0) and no post-exploit findings• High trust reputation: 'RELIABLE' from popular community image (8M+ pulls)• Image pinned by digest ensuring immutability and supply chain integrity

0/100SAFE

ReputationPOPULAR COMMUNITY• High Reputation Community Image (8M+ pulls)• Pinned by digest (Immutable)

RELIABLE

This image is safe for production use. It has no known vulnerabilities and is backed by a high-reputation community publisher with over 8 million pulls. The use of a digest pin guarantees that the image content is immutable, reducing supply chain risks. No security findings were reported, making it suitable for deployment.

Already in good shape · 1 hardening step left

Included in Pro

Scanning procedure

Vulnerability scan
Full CVE sweep across OS packages and app dependencies
Exploitability check
CVEs ranked by exploit probability (EPSS) and matched against CISA KEV
Reachability analysis
Symbol-level proof: is the vulnerable code even linked and callable in your binaries?
Runtime verification
Live-container probes: exposed endpoints, feature flags, real defaults
Supply chain analysis
Base-image lineage, package provenance and signatures — nothing slipped in unnoticed
Hardening recommendations
A hardened build plan — patch, remove unused packages, lock down the runtime — with parity tests proving nothing broke

Vulnerabilities

Vulnerability Log

0 total

CVE ID	Adjusted Severity	Package	Exploit Probability	Risk Context
No vulnerabilities found matching filters.

Want to check another image? Run a full scan with the Docker Security Scanner.